content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header not implemented

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Diagnostics

Metrics

ftp-data

http

EtherNetIP-1

http-alt

caerpc

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

_fbp

_gat

_gid

pll_language

Les Murmures du Ligon

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.

YouTube

WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.

WP Rocket

Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.

Yoast SEO

Apache is a free and open-source cross-platform web server software.

Apache

Polylang is a WordPress plugin which allows you to create multilingual WordPress site.

Polylang

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.

jQuery Migrate

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

Facebook Pixel

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Infomaniak is a hosting company based in Geneva, Switzerland.

Infomaniak

Open Graph is a protocol that is used to integrate any web page into the social graph.

Open Graph

Absence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

Missing Anti-clickjacking Header

Vulnerable JS Library

Cross-Domain JavaScript Source File Inclusion

Timestamp Disclosure - Unix

X-Content-Type-Options Header Missing

Information Disclosure - Suspicious Comments

Re-examine Cache-control Directives

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

Cookies set without using the Secure flag or set over HTTP

Initial redirection is to HTTPS on same host, final destination is HTTPS

HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)

X-Content-Type-Options header set to "nosniff"

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

X-XSS-Protection header set to "1; mode=block"

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

_ga_78DG5YPE7N

_ga_D9ZE5LB4KQ

_shopify_sa_p

_pin_unauth

_gcl_au

_shopify_sa_t

_orig_referrer

__cf_bm

_shopify_s

_ga_HXMZT7KSHG

_shopify_y

_landing_page

keep_alive

_cmp_a

localization

secure_customer_sig

Coque en Bois

Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.

Cloudflare Bot Management

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

HTTP/3

Cookie with SameSite Attribute None

Permissions Policy Header Not Set

Strict-Transport-Security Header Not Set

Base64 Disclosure

Non-Storable Content

All cookies use the Secure flag and all session cookies use the HttpOnly flag

HTTP Strict Transport Security (HSTS) header not implemented

Subresource Integrity (SRI) not implemented, but all external scripts are loaded over HTTPS

https

_gat_UA-109038707-1

PrestaShop-d88ae6b6381834d2794f1a055301a0fa

Salaisons du Velay

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

PrestaShop is a freemium, open-source ecommerce solution, written in the PHP programming language with support for the MySQL database management system.

PrestaShop

Facebook Login is a way for people to create accounts and log into your app across multiple platforms.

Facebook Login

Apache HTTP Server

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Tag Manager

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Slider Revolution is a flexible and highly customisable slider.

Slider Revolution

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

Google analytics enhanced ecommerce is a plug-in which enables the measurement of user interactions with products on ecommerce websites.

Google Analytics Enhanced eCommerce

FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.

FancyBox

Microsoft 365 is a line of subscription services offered by Microsoft as part of the Microsoft Office product line.

URL (3)	Accessibilité	Performance	SEO	SSL	HTTP	Vulnérabilités	CodeQL	Nmap	Ports ouverts	Trackers	Cookies	404
lesmurmuresdulignon.com
www.coque-en-bois.fr
www.salaisonsduvelay.com